Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/b04e8fd2-409b-30a3-b752-ca413b899c45.roa
File:                     b04e8fd2-409b-30a3-b752-ca413b899c45.roa (raw, json)
Hash identifier:          WT3Bf/KCaHO4I4SofIlXjoRlDgXmJX8VCIAEGcnZBCQ=
Subject key identifier:   37:15:C0:7A:E3:2A:B8:32:21:8F:FE:A9:DC:5A:14:81:9F:97:93:BC
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F43285848424ADB071A8FABE9556EC280
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/b04e8fd2-409b-30a3-b752-ca413b899c45.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26768
IP address blocks:        104.251.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:db:07:1a:8f:ab:e9:55:6e:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=383efc5f-e349-4ef4-997d-2fe5677ea298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:80:63:ca:fc:70:81:a3:a1:3b:2f:31:a3:
                    e0:0a:e4:0b:40:ed:68:29:ab:f3:64:01:f7:6e:47:
                    5c:e7:d4:0c:1f:3d:a5:7e:3c:05:f3:9f:43:68:ce:
                    1a:f8:71:d6:af:e3:ef:a3:0e:f3:e4:09:e6:c8:d8:
                    ee:76:b6:26:46:86:0c:02:55:f6:6f:99:4a:fe:d1:
                    7e:ca:57:e1:55:9b:1b:aa:63:5e:33:fc:cc:51:df:
                    6b:82:42:b8:d2:0a:27:4c:8a:77:07:99:25:e6:48:
                    e8:5e:20:d0:8b:3c:16:70:31:80:4e:f8:01:b3:4a:
                    c6:3b:3c:d2:f8:26:99:94:73:42:f2:81:d2:85:6e:
                    21:b2:8c:66:20:be:82:b3:f9:cc:cc:a1:33:42:57:
                    7c:5e:57:c7:59:0d:5a:17:4e:16:62:87:56:b2:0e:
                    a5:59:ca:de:4a:22:ab:a4:f4:ac:74:03:7a:e2:be:
                    29:c0:a8:95:06:30:75:39:10:47:f2:f3:a3:24:f5:
                    fc:e1:4e:ad:22:c3:c8:3f:c8:bc:09:b1:4a:e7:2c:
                    77:70:3c:9c:2c:6d:fb:50:ab:9d:f2:de:e9:20:d2:
                    43:d5:10:61:79:29:5f:0e:01:dc:52:eb:66:fe:7c:
                    27:c5:8a:34:89:aa:b2:1b:81:79:13:fb:4a:ec:02:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:15:C0:7A:E3:2A:B8:32:21:8F:FE:A9:DC:5A:14:81:9F:97:93:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/b04e8fd2-409b-30a3-b752-ca413b899c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:31:a9:f1:d8:be:cd:dd:84:71:c6:d2:5c:37:98:23:fd:a4:
         85:31:22:03:5c:56:c8:b8:22:d9:16:30:a6:da:b6:a6:e9:4c:
         46:14:0e:00:6b:ed:45:ec:45:77:72:aa:93:dd:ff:f7:c9:09:
         e2:06:0e:9a:3c:cf:ca:ba:bb:2d:de:ca:3a:db:5c:bc:58:d7:
         0e:68:cd:08:a8:77:39:64:96:5f:51:80:17:e6:e3:b5:17:a0:
         3a:ae:16:a0:bd:be:9c:ea:da:27:8c:16:16:73:0b:61:65:17:
         93:b2:ad:81:3c:2c:85:ab:81:4d:93:35:74:12:0c:c3:a7:1c:
         3b:15:69:6d:97:27:84:59:39:16:a2:50:6b:38:7a:4b:40:ec:
         fc:40:31:fe:de:40:ab:de:63:45:d4:24:79:f2:76:8e:3e:f4:
         c7:ab:77:ff:e3:24:1c:4b:0f:81:30:46:fc:03:87:08:c2:e3:
         aa:e1:27:b9:82:00:98:08:75:03:4e:fc:b7:54:a2:20:09:55:
         1e:95:5c:5e:e3:ac:9e:0e:1c:c0:4c:e4:0a:a0:d4:72:c9:cd:
         6b:d3:7d:a9:7f:a7:cb:ff:47:1a:ff:95:5c:09:8b:b9:68:fc:
         64:ee:88:67:20:9a:cd:42:d3:bf:e8:88:67:bf:74:55:42:ae:
         6b:fa:06:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStsHGo+r6VVuwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzgzZWZjNWYtZTM0OS00ZWY0LTk5N2QtMmZlNTY3N2VhMjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50+AY8r8cIGjoTsvMaPgCuQLQO1oKavzZAH3
bkdc59QMHz2lfjwF859DaM4a+HHWr+Pvow7z5AnmyNjudrYmRoYMAlX2b5lK/tF+
ylfhVZsbqmNeM/zMUd9rgkK40gonTIp3B5kl5kjoXiDQizwWcDGATvgBs0rGOzzS
+CaZlHNC8oHShW4hsoxmIL6Cs/nMzKEzQld8XlfHWQ1aF04WYodWsg6lWcreSiKr
pPSsdAN64r4pwKiVBjB1ORBH8vOjJPX84U6tIsPIP8i8CbFK5yx3cDycLG37UKud
8t7pINJD1RBheSlfDgHcUutm/nwnxYo0iaqyG4F5E/tK7AL4pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcVwHrjKrgyIY/+qdxaFIGfl5O8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYjA0ZThmZDItNDA5Yi0z
MGEzLWI3NTItY2E0MTNiODk5YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPvvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIxqfHYvs3dhHHG0lw3mCP9pIUxIgNcVsi4ItkWMKbatqbpTEYUDgBr
7UXsRXdyqpPd//fJCeIGDpo8z8q6uy3eyjrbXLxY1w5ozQiodzlkll9RgBfm47UX
oDquFqC9vpzq2ieMFhZzC2FlF5OyrYE8LIWrgU2TNXQSDMOnHDsVaW2XJ4RZORai
UGs4ektA7PxAMf7eQKveY0XUJHnydo4+9Merd//jJBxLD4EwRvwDhwjC46rhJ7mC
AJgIdQNO/LdUoiAJVR6VXF7jrJ4OHMBM5Aqg1HLJzWvTfal/p8v/Rxr/lVwJi7lo
/GTuiGcgms1C07/oiGe/dFVCrmv6BlI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:44 2025 by rpki-client